Bump the dependabot group across 1 directory with 5 updates

[dependabot]

Bumps the dependabot group with 5 updates in the / directory:

Package	From	To
importlib-metadata	8.6.1	8.7.0
pip	25.0.1	25.1.1
setuptools	79.0.0	80.3.1
certifi	2025.1.31	2025.4.26
termcolor	3.0.1	3.1.0

Updates importlib-metadata from 8.6.1 to 8.7.0

Changelog

Sourced from importlib-metadata's changelog.

v8.7.0

Features

• .metadata() (and Distribution.metadata) can now return None if the metadata directory exists but not metadata file is present. (#493)

Bugfixes

• Raise consistent ValueError for invalid EntryPoint.value (#518)

Commits

• 708dff4 Finalize
• b3065f0 Merge pull request #519 from python/bugfix/493-metadata-missing
• e4351c2 Add a new test capturing the new expectation.
• 5a65705 Refactor the casting into a wrapper for brevity and to document its purpose.
• 0830c39 Add news fragment.
• 22bb567 Fix type errors where metadata could be None.
• 57f31d7 Allow metadata to return None when there is no metadata present.
• b9c4be4 Merge pull request #518 from python/bugfix/488-bad-ep-value
• 9f8af01 Prefer a cached property, as the property is likely to be retrieved at least ...
• f179e28 Also raise ValueError on construction if the value is invalid.
• Additional commits viewable in compare view

Updates pip from 25.0.1 to 25.1.1

Changelog

Sourced from pip's changelog.

25.1.1 (2025-05-02)

Bug Fixes

• Fix req.source_dir AssertionError when using the legacy resolver. ([#13353](https://github.com/pypa/pip/issues/13353) <https://github.com/pypa/pip/issues/13353>_)
• Fix crash on Python 3.9.6 and lower when pip failed to compile a Python module during installation. ([#13364](https://github.com/pypa/pip/issues/13364) <https://github.com/pypa/pip/issues/13364>_)
• Names in dependency group includes are now normalized before lookup, which fixes incorrect Dependency group '...' not found errors. ([#13372](https://github.com/pypa/pip/issues/13372) <https://github.com/pypa/pip/issues/13372>_)

Vendored Libraries

• Fix issues with using tomllib from the stdlib if available, rather than tomli
• Upgrade dependency-groups to 1.3.1

25.1 (2025-04-26)

Deprecations and Removals

• Drop support for Python 3.8. ([#12989](https://github.com/pypa/pip/issues/12989) <https://github.com/pypa/pip/issues/12989>_)
• On python 3.14+, the pkg_resources metadata backend cannot be used anymore. ([#13010](https://github.com/pypa/pip/issues/13010) <https://github.com/pypa/pip/issues/13010>_)
• Hide --no-python-version-warning from CLI help and documentation as it's useless since Python 2 support was removed. Despite being formerly slated for removal, the flag will remain as a no-op to avoid breakage. ([#13303](https://github.com/pypa/pip/issues/13303) <https://github.com/pypa/pip/issues/13303>_)
• A warning is emitted when the deprecated pkg_resources library is used to inspect and discover installed packages. This warning should only be visible to users who set an undocumented environment variable to disable the default importlib.metadata backend. ([#13318](https://github.com/pypa/pip/issues/13318) <https://github.com/pypa/pip/issues/13318>_)
• Deprecate the legacy setup.py bdist_wheel mechanism. To silence the warning, and future-proof their setup, users should enable --use-pep517 or add a pyproject.toml file to the projects they control. ([#13319](https://github.com/pypa/pip/issues/13319) <https://github.com/pypa/pip/issues/13319>_)

Features

• Suggest checking "pip config debug" in case of an InvalidProxyURL error. ([#12649](https://github.com/pypa/pip/issues/12649) <https://github.com/pypa/pip/issues/12649>_)
• Using --debug also enables verbose logging. ([#12710](https://github.com/pypa/pip/issues/12710) <https://github.com/pypa/pip/issues/12710>_)
• Display a transient progress bar during package installation. ([#12712](https://github.com/pypa/pip/issues/12712) <https://github.com/pypa/pip/issues/12712>_)
• Minor performance improvement when installing packages with a large number of dependencies by increasing the requirement string cache size. ([#12873](https://github.com/pypa/pip/issues/12873) <https://github.com/pypa/pip/issues/12873>_)
• Add a --group option which allows installation from :pep:735 Dependency Groups. --group accepts arguments of the form group or path:group, where the default path is pyproject.toml, and installs

... (truncated)

Commits

• 01857ef Bump for release
• 08d8bb9 Merge pull request #13374 from pfmoore/fixups
• 2bff84e Merge pull request #13363 from sbidoul/fix-source_dir-assert
• 644e71d News file fixups
• 426856f Merge pull request #13364 from ichard26/bugfix/python39
• b7e3aea Merge pull request #13356 from eli-schwartz/tomllib
• 8c678fe Merge pull request #13373 from sirosen/update-vendored-dependency-groups
• 7d00639 Update newsfiles for dependency-groups patch
• 6d28bbf Update version of dependency-groups to v1.3.1
• 94bd66d Revert StreamWrapper removal to restore Python 3.9.{0,6} compat
• Additional commits viewable in compare view

Updates setuptools from 79.0.0 to 80.3.1

Changelog

Sourced from setuptools's changelog.

v80.3.1

Bugfixes

• Restored select attributes in easy_install for temporary pbr compatibility. (#4976)

v80.3.0

Features

• Removed easy_install and package_index modules. (#917)
• Restored license declaration in package metadata. See jaraco/skeleton#171. (#4956)

v80.2.0

Features

• Restored support for install_scripts --executable (and classic behavior for the executable for those invocations). Instead, build_editable provides the portable form of the executables for downstream installers to rewrite. (#4934)

v80.1.0

Features

• Added a deadline of Oct 31 to the setup.py install deprecation.

Bugfixes

• With setup.py install --prefix=..., fall back to distutils install rather than failing. Note that running setup.py install is deprecated. (#3143)

v80.0.1

Bugfixes

• Fixed index_url logic in develop compatibility shim. (#4966)

... (truncated)

Commits

• f37845b Bump version: 80.3.0 → 80.3.1
• a6f8db0 Merge pull request #4980 from pypa/debt/4976-pbr-compat
• 05cf544 Add news fragment.
• 5b39e4e Add the deprecation warning to attribute access.
• 30c0038 Render the attributes dynamically.
• d622935 Restore ScriptWriter and sys_executable properties.
• 88bd892 Add a failing integration test. Ref #4976
• 9dccfa4 Moved pbr setup into a fixture.
• af8b322 Bump version: 80.2.0 → 80.3.0
• e7b8084 Merge pull request #4963 from pypa/debt/remove-easy-install
• Additional commits viewable in compare view

Updates certifi from 2025.1.31 to 2025.4.26

Commits

• 275c9eb 2025.04.26 (#347)
• 3788331 Bump actions/setup-python from 5.4.0 to 5.5.0 (#346)
• 9d1f1b7 Bump actions/download-artifact from 4.1.9 to 4.2.1 (#344)
• 96b97a5 Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#343)
• c054ed3 Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (#342)
• 44547fc Bump actions/download-artifact from 4.1.8 to 4.1.9 (#341)
• 5ea5124 Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#340)
• 2f142b7 Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (#339)
• 80d2ebd Bump actions/setup-python from 5.3.0 to 5.4.0 (#337)
• See full diff in compare view

Updates termcolor from 3.0.1 to 3.1.0

Release notes

Sourced from termcolor's releases.

Release 3.1.0

Added

• Add true colour RGB option as input arguments (#102) @​icyveins7
• Cache system lookups to save invocation time (#107) @​miketheman
• Advertise typing via classifier (#104) @​miketheman

Changed

• Migrate coverage configuration to pyproject.toml (#105) @​miketheman

Commits

• 1e0ae11 Test free-threaded Python 3.13t and 3.14t (#111)
• 9e3f5bb Test free-threaded Python 3.13t and 3.14t
• 52bf721 Add mutation testing (#109)
• 968cfa5 Add tests for cprint kwargs
• 6048bd5 Add mutation testing
• fd08149 Test code branches (#108)
• b32a006 Test code branches
• 60815d2 Cache system lookups to save invocation time (#107)
• 7e1e892 Complete coverage via added tests (#106)
• e516dd5 Cache system lookups to save invocation time
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coveralls]

Pull Request Test Coverage Report for Build 14831484119

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 86.743%

---

Totals
Change from base Build 14829440679:	0.0%
Covered Lines:	2362
Relevant Lines:	2723

---

💛 - Coveralls

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.